CVE-2026-54477

CVE-2026-54477: Panel de administración sin cabeceras de seguridad clickjacking / XSS Aviso Campo| Valor ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medio Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

Detecting-CVE-2018-15708-Vulnerabilities

Detecting-CVE-2018-15708-Vulnerabilities...

AndroidSecurityEvolution

Evolución de la seguridad de Android Mejoras de seguridad significativas de las versiones principales recientes de Android, a partir de Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Mejoras de seguridad - Android 5 A partir de agosto de 2023, las actualizaciones de Google Play Servic...

CVE-2026-89308

creationtimestamp| type| source ---|---|--- 2026-09-15 08:45:06+00:00| seen| https://www.acn.gov.it/portale/w/trexom-aggiornamenti-di-sicurezza 2026-09-15 12:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvkl7ypncf24 2026-09-15 13:38:12+00:00| seen|...

cve-2024-10220

Este repositorio no tiene un README...

projet-secu

Este repositorio no tiene un README...

CVE-2026-91819

Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF and form-security validation. CakePHP honors a method field or X-HTTP-Method-Override header by rewriting the effective request method. For override values outside the normal write verbs...

Cyber-Attack-Simulation-

Cyber-Attack-Simulation- Log4Shell CVE-2021-44228...

EUVD-2026-78317

Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF and form-security validation. CakePHP honors a method field or X-HTTP-Method-Override header by rewriting the effective request method. For override values outside the normal write verbs...

ROOT-OS-DEBIAN-11-CVE-2023-34152 CVE-2023-34152 in imagemagick - Patched by Root

Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:11. Multiple fixed versions available...

CLSA-2026-1789456194 TuxCare security update for idna (1 CVE)

TuxCare rebuilt idna to address 1 CVE. Fixed in 3.6.post2+tuxcare...

ROOT-OS-DEBIAN-13-CVE-2026-3479 CVE-2026-3479 in python3.13 - Patched by Root

Root has patched CVE-2026-3479 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-15308 CVE-2026-15308 in python3-defaults - Patched by Root

Root has patched CVE-2026-15308 in the python3-defaults package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-R28C-9Q8G-F849 GHSA-r28c-9q8g-f849 in postcss - Patched by Root

Root has patched GHSA-r28c-9q8g-f849 in the postcss package for Root:npm. Multiple fixed versions available...

CVE-2026-45769

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. A remote attacker can exploit this vulnerability by sending repeated crafted User Datagram Protocol UDP traffic to the IKEv2 parser. This can cause the...

perl security update

An update is available for perl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Perl is a high-level programming language that is commonly used for system...

IRM

IRM-2022 事件响应方法论 2022 CERT Societe Generale 与 CERT aDvens 合作，提供易于使用的运营事件最佳实践。这些速查表专门用于事件处理，涵盖 CERT 团队可能参与的多个领域。对于我们所处理的每种安全事件，都有一个对应的 IRM。 CERT Societe Generale 谨感谢 SANS 和 Lenny Zeltser，他们为部分 IRM 提供了重要的灵感来源。 我们还要感谢 CERT aDvens 的协作工作和法语翻译。 如果您在这些 IRM 中发现错误或问题，请随时联系我们。 本作品采用 知识共享署名 3.0 未本地化许可协议 进行许...

Nacos <1.4.1 - Authentication Bypass

Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...

Wordpress Email Subscribers by Icegram Express - SQL Injection

The Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IGESSubscribersQuery' class in all versions up to, and including, 5.7.14 due to insufficient escaping ...

Roxy Fileman 1.4.5 - Unrestricted File Upload

Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id: CVE-2018-20526 info: name: Roxy Fileman 1.4.5 -...